CVE-2026-98886 drm/gma500: return errors from Oaktrail HDMI I2C reads

Not scored Published 23 Oct 2026 Updated 26 Oct 2026

Exploited in the wild: Not known
Fix: Available

What is CVE-2026-98886?

CVE-2026-98886 is a vulnerability in Linux, published on 23 Oct 2026.

Official description

In the Linux kernel, the following vulnerability has been resolved:

drm/gma500: return errors from Oaktrail HDMI I2C reads

xfer_read() waits for the HDMI I2C transaction to reach I2C_TRANSACTION_DONE, but it ignores both timeout and signal returns from wait_for_completion_interruptible_timeout(). If the interrupt never advances the transaction state, the loop can wait forever.

Return -ETIMEDOUT when the completion wait expires, propagate interrupted waits, and make the I2C master_xfer callback return the first transfer error instead of reporting a successful message count.

Which versions are affected by CVE-2026-98886?

How do I fix CVE-2026-98886?

Upgrade to a fixed version.

Is CVE-2026-98886 being exploited?

There is no known exploitation of CVE-2026-98886 in the wild and no public exploit code.

Sources

Also known as AZL-110623, BELL-CVE-2026-98886, DEBIAN-CVE-2026-98886, GHSA-mmv9-fq67-57xh, UBUNTU-CVE-2026-98886.